Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.coreweave.com/llms.txt

Use this file to discover all available pages before exploring further.

Prerequisites

To configure SAML SSO, you need an active CoreWeave account and admin permissions.

Configure SAML SSO for your organization

SAML SSO policies for CKS can be configured manually or by using a metadata URL.
SAML responses and assertions must both be signed by your IdP.

Configure SSO manually

Before configuring the SSO policy manually, you’ll need the following information from your identity provider (IdP):
  • The IdP’s SSO URL
  • The IdP’s unique Entity ID
  • A x.509 security certificate provided by your IdP
To configure SSO manually, do the following:
  1. In Cloud Console, navigate to SAML SSO configuration and click the Configure SAML button.
  2. Select the Manual Configuration tab: Screenshot showing where to select Manual Configuration.
  3. Enter the SSO URL, the Entity ID, and the provided X.509 Security Certificate.
  4. Click the Next button.
  5. Confirm the information in the dialog boxes is correct.
  6. Click the Deploy SSO button to activate the policy.
After deploying the SSO policy, you must add specific attributes to the IdP. For more information, see the Add attributes to the IdP section below.

Add attributes to the IdP

After deploying the SSO policy, you must add the following attributes to your IdP:
KeyDescription
emailUser’s email (unique identifier)
first_nameUser’s first name
last_nameUser’s last name

Manage the SSO policy

Once the SSO policy is deployed, the configuration dialog displays the policy’s information and lets you manage it using the following buttons: Disable SAML, Enable SAML, and Edit.

Accessing the SSO Login Page

After you configure SSO for your organization, direct users to log in using your organization’s dedicated SSO login URL. The SSO login URL follows a standard format that includes your organization’s unique ID directly before the final /login path segment. To access the SSO login URL, do the following:
  1. In Cloud Console, navigate to Account Settings and find your organization’s ID.
  2. Replace ORG_ID in the example below with your Org ID.
    # Replace `ORG_ID` with your organization's ID.
    https://console.coreweave.com/accounts/saml/ORG_ID/login
    
    Example If your organization ID is abc123, your SSO login URL would be:
    https://console.coreweave.com/accounts/saml/abc123/login
    
  3. Share this URL with your team so they can log in using your SSO configuration.
Last modified on April 17, 2026